Microsoft Windows 10 21h2

Windows PlayToManager Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Performance Counters for Windows Elevation of Privilege Vulnerability

Xbox Live Save Service Elevation of Privilege Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

Windows File Explorer Elevation of Privilege Vulnerability

Windows ALPC Elevation of Privilege Vulnerability

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Windows ALPC Elevation of Privilege Vulnerability

Windows ALPC Elevation of Privilege Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Windows Work Folder Service Elevation of Privilege Vulnerability

Windows ALPC Elevation of Privilege Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

Windows Hyper-V Denial of Service Vulnerability

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use with this bootloader. Access to the EFI System Partition is required for booting using external media.

Windows Group Policy Elevation of Privilege Vulnerability

BitLocker Security Feature Bypass Vulnerability

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Windows DCOM Server Security Feature Bypass

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability

Windows HTML Platforms Security Feature Bypass Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Server Service Information Disclosure Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability

Windows Kernel Denial of Service Vulnerability

Windows Hyper-V Information Disclosure Vulnerability

Windows iSCSI Target Service Information Disclosure Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability